Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/3R5uo8Ww-D3u6jt2t3ooJUi-qB4.roa
File: 3R5uo8Ww-D3u6jt2t3ooJUi-qB4.roa (raw, json)
Hash identifier: NxOvYW/XOMI5XYtVkYgqSdyUXe8hMJJGGEl2HZUI8jo=
Subject key identifier: DD:1E:6E:A3:C5:B0:F8:3D:EE:EA:3B:76:B7:7A:28:25:48:BE:A8:1E
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018A73F905726719806E7C80E0A09A12CDC6
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/3R5uo8Ww-D3u6jt2t3ooJUi-qB4.roa
Signing time: Fri 08 Sep 2023 08:46:54 +0000
ROA not before: Fri 08 Sep 2023 08:46:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.218.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Sep 2023 07:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:73:f9:05:72:67:19:80:6e:7c:80:e0:a0:9a:12:cd:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Sep 8 08:46:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd1e6ea3c5b0f83deeea3b76b77a282548bea81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5b:3b:ae:91:86:b9:56:a5:5a:aa:c5:cc:2c:
f2:a1:7e:05:b3:8f:e5:da:0b:df:c1:03:6e:b6:b2:
33:28:ac:26:14:f3:f3:c4:ef:3a:a3:0f:7b:9e:04:
c7:c8:2d:0f:30:94:5b:5e:29:07:7f:a2:6c:26:ee:
85:19:37:7a:6b:e0:f7:c6:ce:eb:9e:8a:2b:65:68:
2a:00:68:c9:5e:6d:fb:46:09:a8:3f:6c:3c:94:45:
12:ba:87:af:cf:df:7d:b5:ba:38:e5:36:12:7f:43:
58:25:b5:79:96:20:92:eb:96:69:4d:d9:82:12:e6:
b0:18:e9:f2:12:9f:29:6d:9c:1f:bc:84:16:f8:96:
74:e5:9f:0d:3d:39:7e:66:b3:37:94:7f:87:93:ac:
ba:bf:3c:8e:7d:e9:b1:d9:8e:b6:22:7e:85:92:b0:
d5:86:de:b7:21:cb:ef:4e:81:af:d1:29:e8:b8:84:
af:88:20:86:00:d7:83:27:ee:9d:b2:bc:41:d5:56:
a1:87:6b:09:0f:72:fa:2e:ad:8e:72:43:63:a4:ef:
0e:50:55:96:d5:53:e3:43:68:6e:d8:14:07:43:45:
2f:44:f7:6d:4e:8b:d4:5e:ae:43:e0:aa:56:b6:97:
6a:c8:fd:86:a7:3c:a3:b0:83:55:fa:ed:36:bf:f0:
aa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1E:6E:A3:C5:B0:F8:3D:EE:EA:3B:76:B7:7A:28:25:48:BE:A8:1E
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/3R5uo8Ww-D3u6jt2t3ooJUi-qB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.42.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:e8:83:68:4e:cd:0c:b0:7e:76:5a:e2:52:1a:b7:73:41:30:
fa:16:df:e0:98:98:8c:65:f5:9e:98:4a:00:d4:66:dc:3a:5d:
ce:6f:62:82:66:21:7f:a2:40:c7:05:48:fb:1f:33:9a:7f:93:
37:65:b1:f4:50:05:d6:d0:b9:9e:6e:08:f9:69:b0:a5:d0:f8:
39:86:89:6e:86:f8:31:11:10:17:f1:58:98:ff:59:06:db:74:
d6:75:76:40:06:02:98:0f:28:24:63:5e:f2:56:68:98:02:58:
6c:ba:d4:13:69:16:0d:e8:06:ab:39:ca:36:16:fe:e6:04:1b:
50:27:0b:c1:3f:f8:ce:f3:22:ad:d6:4b:11:b6:66:af:27:78:
d7:66:90:56:48:47:eb:38:09:1a:0b:e3:7c:c5:14:73:2d:fd:
79:74:29:4d:8c:20:fd:f0:e3:0a:96:83:bd:cd:df:e3:06:ae:
c7:d7:b4:4c:15:ed:21:f9:f4:98:95:40:b4:e0:55:ab:aa:27:
4b:53:b3:06:8c:8f:68:35:b4:30:77:f6:06:4e:f3:8e:f2:4b:
4b:c1:5b:6f:ad:08:5a:c1:8f:3d:f3:d3:6f:7f:fb:a9:4a:b5:
2e:ff:2f:68:11:63:ba:6c:d8:6e:e0:ce:a6:1e:5e:84:e8:de:
3a:94:6b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:37 2024 by rpki-client on console-ams.rpki-client.org